Vulnerabilities > Jenkins > Icescrum > High

DATE CVE VULNERABILITY TITLE RISK
2019-10-16 CVE-2019-10443 Cleartext Storage of Sensitive Information vulnerability in Jenkins Icescrum
Jenkins iceScrum Plugin 1.1.4 and earlier stored credentials unencrypted in job config.xml files on the Jenkins master where they could be viewed by users with Extended Read permission, or access to the master file system.
network
low complexity
jenkins CWE-312
8.8